Re: LVM spanning multiple encrypted drives

2010-05-17 Thread thib
B. Alexander wrote: I started looking in this direction myself last night. I am, for the life of me, unable to figure why or how drives are designated as early versus non-early. With the exception of adding "noearly" to the options in /etc/cryptab. However, I am unable to find a single partition

Re: LVM spanning multiple encrypted drives

2010-05-16 Thread Alexander Samad
On Sun, May 16, 2010 at 3:57 AM, B. Alexander wrote: > I use LUKS drive encryption on several machines on my network. The problem I > have is that every time I attempt to set up LVM which spans multiple drives, > it decrypts the first one, then panics because it can't see the rest of the what is

Re: LVM spanning multiple encrypted drives

2010-05-16 Thread deloptes
B. Alexander wrote: > I'm really not comfortable with modifying something like that, not because > I can't, but rather because I don't want to tweak something and have it > break on the next upgrade. So I will take the latter suggestion. I want to > build a test box to see if I can further trouble

Re: LVM spanning multiple encrypted drives

2010-05-16 Thread B. Alexander
On Sun, May 16, 2010 at 12:45 PM, thib wrote: > ... > but consider encrypting the logical volume instead of the physical > volumes. It makes much more sense to me. > It seems to me that > Does anyone know the right way to get the drives decrypted first? >> > > The fun might take place in yo

Re: LVM spanning multiple encrypted drives

2010-05-16 Thread thib
B. Alexander wrote: [snip] The fix is probably simple, but I haven't found the right combination of secret sauce to get all drives decrypted before the system issues vgchange -a y, which results in a panic or other Bad Things. I'd say the design of your setup is the problem. Obviously, this d

LVM spanning multiple encrypted drives

2010-05-15 Thread B. Alexander
I use LUKS drive encryption on several machines on my network. The problem I have is that every time I attempt to set up LVM which spans multiple drives, it decrypts the first one, then panics because it can't see the rest of the PVs, because they are still encrypted. For instance, the my backup ma